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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
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Status 
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2a)n This action is FINAL. 2b)l3 This action is non-final. 
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DETAILED ACTION 



1. 



This Office Action is responding to the RGB received on 07/20/06. 



2. 



Claims 1-22 are canceled. 



3. 



Claims 23-31 are newly added claims. 



4. 



Claims 23-31 are pending. 



Claim Rejections - 35 USC § 103 



5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 



6. Claims 23-24 and 31 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Ausubel (Cited in PTO 892 dated 1 1/02/05), in view of Micali, US Patent No. 
6026163. 



Ausubel discloses " A method for preserving the integrity of a negotiation 
conducted via a network, such as, the Internet, and using clients and/or servers, among 
a plurality of parties each of whom is making a private input during the negotiation and 
wherein a trusted entity acting as a center computes and outputs a value F of these 
inputs constituting the output of the negotiation comprising the steps of: 



7. 



As per claims 23 and 31 : 
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a) providing an architecture which includes a center A, and a plurality of 
participants B.sub.t, B.sub.2,..., B.sub.n, to engage in a negotiation during which all 
conrimunications originating with a participant B.sub.i and transmitted to center A are 
exclusive" in (Fig 1, Col 24 lines 40-50, and Col 26 lines 5-20); 

b) "secretly generating an input x.sub.i by each participant B.sub.i" in (Col 26 
lines 20-40); 

c) " publishing bv the center A to each participant a commitment to K 
combinatorial circuits that compute F, where K is a security parameter "; 

d) transmitting bv each participant B.sub.i to the center A a commitment c.sub.i to 
the value of B.sub.i's input x.sub.i, where c.sub.i is an encryption of x.sub.i: 

e) "responsive to receipt of the commitments of the participants, publishing by the 
center A to the participants the commitments received" in (Col 26 line 65 to Col 27 line 
20); 

f) providing to each participant B.sub.i part of the K combinatorial circuits that the 
center A committed to, and requesting center A to open them, whereupon each 
participant B.sub.i can verify that the part of the circuits opened to participant B.sub.i 
computes a value F" in (Col 22 lines 30-60, and Col 27 lines 1-11); 

g) transmitting by each participant B.sub.i to center A its input x.sub.i and 
decryption data to enable center A to verify that x.sub.i corresponds to the transmitted 
commitment c.sub.i" in (Col 26 lines 20-40); 
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h) computing by center A a value of F based on tlie inputs x.sub.i it received by 
using a part of the K combinatorial circuits not disclosed to the participants, and 
publishing the computed value of F to the participants" in (Col 25 line 59 to Col 26 line 
4. and Col 27 lines 1-13); and 

i) " transmitting to all participants a proof that the computed value of F was 
computed correctly, which proof can be verified by each participant using the published 
commitments while preventing a coalition of any one subset of participants from 
learning (i) anything which cannot be computed just from the output of the K 
combinatorial circuits and from their own inputs, and (ii) information about the inputs of 
other users" in (Col 27 lines 1 -1 3). 

However, Ausubel does not specifically teach of submitting the bid in a secure 
manner. Ausubel only refers to sealed bit in Col 21 lines 15-20. 

Nevertheless, Micali discloses the "Distributed Split-Key cryptosystem and 
Applications" invention, which includes a method of generating a common key by 
calculating a combination of all participant's or bidder's public key. The common key is 
used by all participants or bidders to encrypt their bids and submit the encrypted bids to 
a center. The common key is the K security combinatorial parameter and the c.sub.i iis 
the encrypted bids. (Col 1 line 60 to Col 2 line 16 and Col 2 lines 40-65) 

Therefore, it would have been obvious at the time of the invention was made for 
one having skill in the art to modify Ausubel's invention to incorporate Micali's teaching 
of encrypting the bids with the common key to provide a secrecy of the bids until the 
time is right to open, to verify and to calculate the result. 
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8. As per claim 24: 

The method of claim 23 wherein step i is carried out using a value F that is 
computed from the K combinatorial circuits using inputs x.sub.i and outputs j,Y of the 
computed value of F, F' Outputs I if and only if X(j)=Y, and X(j)>=X(i) for every i different 
from j" in (Col 25 line 59 to Col 26 line 4, and Col 27 lines 1-13). 

Allowable Subject Matter 

9. Claims 25 and 26 are objected to as being dependent upon a rejected base 
claim, but would be allowable if rewritten in independent form including all of the 
limitations of the base claim and any intervening claims. 

1 0. Claims 27-30 are allowed. 

11. As per claim 27: 

A method for preserving the integrity of a negotiation conducted via a network, 
such as, the Internet, and using clients and/or servers, among a plurality of parties each 
of whom is making a private input during the negotiation and wherein atrusted entity 
acting as a center computes and outputs a value F of these inputs constituting the 
output of the negotiation comprising the steps of: 

a) announcing by center A that it will compute F; 
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b) providing an architecture which includes a center A, and a plurality of 
participants B. sub.], B.sub.2,..., B.sub.n, to engage in a negotiation during which all 
comnnunications originating with a participant B.sub.i and transmitted to center A are 
exclusive; 

c) constructing by center A K garbled circuits including gates having wire inputs 
and outputs that compute F; 

d) choosing by center A a permutation of each wire input of the circuits; 

e) publishing by center A to each participant B.sub.i tables of gates, and 
commitments to the permutations and the garbled values of the input wires; 

f) secretly generating an input x.sub.i by each participant B.sub.i; 

g) transmitting to center A, for every input wire for every circuit corresponding to 
an input bit known to participant B.subd, a commitment of the permuted value of the 
input bit; 

h) responsive to receipt of the commitments of the participants, publishing by the 
center A to the participants the commitments received; 

i) selecting by each participant B.subd a subset of the K garbled circuits that the 
center A committed to; 

j) revealing by center A its commitments to the subset of the K garbled circuits, 
whereupon each participant B.sub.i can verify that the circuits revealed to participant 
B.sub.i computes value F; 

k) verifying by participants that test.circuits compute F; 
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1) transmitting by each participant B.sub.i to center A its input x.sub.i and 
decryption data to enable center A to verify that x.sub.i corresponds to the transmitted 
commitment in step g; 

m) computing by center A a value of F based on the inputs x.sub.i it received by 
using circuits not in the subset disclosed to the participants, and publishing the 
computed value of F to the participants; 

n) publishing by center A opened commitments and corresponding garbled 
inputs; and 

o) transmitting to all participants a proof that the computed value of F was 
computed correctly, which proof can be verified by each participant using the published 
opened commitments and corresponding garbled inputs while preventing a coalition of 
any one subset of participants from teaming (i) anything which cannot be computed just 
from the output of the K garbled circuits and from their own inputs, and (ii) information 
about the inputs of other users. 

12. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Linh LD Son whose telephone number is 571-272-3856. 
The examiner can normally be reached on 9-6 (M-F). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on 571-272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 

Linh LD Son 



Examiner 
Art Unit 2135 




